Enum WitnessSubcommand 

pub enum WitnessSubcommand {
    Up {
        port: u16,
        data_dir: PathBuf,
        accept_file_key: bool,
        image: Option<String>,
        build_attestation: Option<PathBuf>,
    },
    Down {
        data_dir: PathBuf,
        port: u16,
    },
    Status {
        port: u16,
    },
    VerifyReceipt {
        receipt: PathBuf,
    },
    Register {
        endpoint: String,
    },
    Logs {
        data_dir: PathBuf,
    },
    Start {
        bind: SocketAddr,
        db_path: PathBuf,
        identity: Option<PathBuf>,
        generate: bool,
        curve: String,
    },
    Add {
        url: String,
    },
    Remove {
        url: String,
    },
    List,
    Publish,
}

Witness subcommands.

Variants

Up

Stand up a witness node (and its monitor) from a clean box, one command.

Brings up the node via the embedded standup manifest, mints the node identity at first boot, and prints a health URL. The node runs the released, attested witness image — never a source build.

Fields

port: u16

Host port to publish the node’s endpoint on.

data_dir: PathBuf

Host directory for the node’s persistent data volume.

accept_file_key: bool

Acknowledge file-backed key custody when no managed key store (KMS/enclave) is available. Without this, a node refuses to fall back to a file key rather than silently weaken custody.

image: Option<String>

Override the node image to run. Defaults to the released, attested image the platform ships. Use this only to pin a specific released tag or to run an image already present on an air-gapped host.

build_attestation: Option<PathBuf>

Path to the released image’s signed build attestation (auths artifact sign output). When supplied, the node serves a proof of which binary it runs, and status verifies it. Operators pin the attestation that ships with the released image.

Down

Tear a stood-up witness node down.

Fields

data_dir: PathBuf

Host directory of the node to tear down.

port: u16

Host port the node to tear down was published on.

Status

Report a stood-up node’s health, identity, receipts, and peers.

Fields

port: u16

Host port the node publishes its endpoint on.

VerifyReceipt

Verify a witness receipt offline, on this machine alone.

Reads a receipt bundle (a witness’s signed receipt paired with the witness’s published identity) and checks it with no network and no registry — everything needed is in the bundle. Exits non-zero, with a distinct reason, if the receipt does not verify (a tampered or foreign receipt). This is how a third party who does not trust the node confirms a receipt is genuine corroboration.

Fields

receipt: PathBuf

Path to the receipt bundle JSON file (- reads from stdin).

Register

Open a signed candidate entry to register this node in the directory.

Fields

endpoint: String

Public base URL operators will reach this node at.

Logs

Stream a stood-up node’s logs.

Fields

data_dir: PathBuf

Host directory of the node whose logs to show.

Start

Start the witness HTTP server.

Fields

bind: SocketAddr

Address to bind to (e.g., “127.0.0.1:3333”).

db_path: PathBuf

Path to the SQLite database for witness storage.

identity: Option<PathBuf>

Path to the persisted witness signing-key keystore. The advertised AID derives from this key and is stable across restarts. Without it the witness runs with an EPHEMERAL (unpinnable) identity. The AUTHS_WITNESS_SEED env var (hex seed) takes precedence for containers.

generate: bool

Create the keystore at --identity if it does not exist. Without this, a missing keystore fails closed (never silently mints a fresh key).

curve: String

Signing curve for a newly generated identity: “p256” (default) or “ed25519”.

Add

Add a witness URL to the identity configuration.

Fields

url: String

Witness server URL (e.g., “http://127.0.0.1:3333”).

Remove

Remove a witness URL from the identity configuration.

Fields

url: String

Witness server URL to remove.

List

List configured witnesses for the current identity.

Publish

Publish this identity’s full KEL to its configured witnesses, collecting receipts for every event.

Witness submission is idempotent, so republishing is always safe — use it to backfill a witness added after inception, or to confirm your backers hold what your KEL declares they witness.

Trait Implementations

impl Clone for WitnessSubcommand

fn clone(&self) -> WitnessSubcommand

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for WitnessSubcommand

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromArgMatches for WitnessSubcommand

fn from_arg_matches(__clap_arg_matches: &ArgMatches) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn from_arg_matches_mut( __clap_arg_matches: &mut ArgMatches, ) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn update_from_arg_matches( &mut self, __clap_arg_matches: &ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

fn update_from_arg_matches_mut<'b>( &mut self, __clap_arg_matches: &mut ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

impl Subcommand for WitnessSubcommand

fn augment_subcommands<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate Self via FromArgMatches::from_arg_matches_mut

fn augment_subcommands_for_update<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate self via FromArgMatches::update_from_arg_matches_mut

fn has_subcommand(__clap_name: &str) -> bool

Test whether Self can parse a specific subcommand